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DETAILED ACTION 
Specification 

The disclosure is objected to because of the following informalities: A summary of the 
invention has not been included. See MPEP 608.01 [R-2]. Appropriate correction is required. 

Claim Rejections - 35 USC §103 

I. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

II. Claims 1-27 are rejected under 35 U.S.C. 103(a) as being unpatentable over Teppler, US 
Patent No. 6,792,536 and further in view of Chandersekaran et al., US Patent No. 6,335,972. 
As per claims 1, 10, 19: 

Teppler substantially teaches a method, computer program product, and apparatus for 
accessing cryptographic material comprising the steps of creating cryptographic material, by a 
first Cryptographic-related application programming interface ("API"), in response to a request 
by a first application compatible with the first Cryptographic-related API (col. 33, lines 6-34). 

Not explicitly disclosed is creating a supplemental aspect of the cryptographic material 
by a supplemental method for the first cryptographic API, wherein the supplemental aspect 
includes information for rendering the cryptographic material compatible with a second 
Cryptographic-related API so that the cryptographic material is accessible for a second 
application by the second Cryptographic-related API. However, Chandersekaran et al. teach a 
key recovery API that is compatible with the Cryptographic-related API in order to gain access 
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to the cryptographic material if necessary. Therefore, it would have been obvious to a person in 
the art at the time the invention was made to modify the method disclosed in Teppler for the 
supplemental aspect to include information for rendering the cryptographic material compatible 
with a second Cryptographic-related API so that the cryptographic material is accessible for a 
second application by the second Cryptographic-related API. This modification would have been 
obvious because a person having ordinary skill in the art, at the time the invention was made, 
would have been motivated to do so since it is suggested by Chandersekaran et al. in col 13, 
lines 21-43. 

As per claim 2, 1 1, and 20: 

Teppler and Chandersekaran et al. substantially teach the method, computer program 
product, and apparatus of claims 1, 10, and 19. Furthermore, Teppler teaches wherein the step of 
creating cryptographic material comprises creating a certificate or private key (col. 33, lines 6- 
20). Not explicitly disclosed is the step of creating the supplemental aspect of the cryptographic 
material comprises the steps of deriving a key container name from the certificate or private 
key; and determining whether the key container already exists. However, Chandersekaran et al. 
teach generating key recovery fields where if the recovery field exists these fields may be 
updated. Therefore, it would have been obvious to a person in the art at the time the invention 
was made to modify the method disclosed in Teppler for the supplemental aspect to include 
deriving a key container name from the certificate or private key; and determining whether the 
key container already exists. This modification would have been obvious because a person 
having ordinary skill in the art, at the time the invention was made, would have been motivated 
to do so since it is suggested by Chandersekaran et al. in col. 15, line 49 - col. 16, line 3 1 . 
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As per claim 3, 12, and 21: 

Teppler and Chandersekaran et al. substantially teach the method, computer program 
product, and apparatus of claims 2, 1 1, and 20. Furthermore, Teppler teaches wherein the step of 
deriving a key container name comprises the steps of creating a hash responsive to material 
from the certificate or private key; and encoding the hash (col. 33, lines 35-56). 
As per claims 4, 13, and 22: 

Teppler and Chandersekaran et al. substantially teach the method, computer program 
product, and apparatus of claims 2, 1 1, and 20. Furthermore, Teppler teaches wherein the step of 
creating a certificate or private key comprises creating the private key (col. 33, lines 6-20). Not 
explicitly disclosed is wherein if the key container already exists for the key, the step of creating 
the supplemental aspect of the cryptographic material comprises the steps of determining 
whether the key container contains a certificate; associating the private key as a member of a key 
pair associated with the certificate, if the key container contains a certificate; and associating the 
private key as a member of a key pair having a default key specification, if the key container 
does not contain a certificate. However, Chandersekaran et al. teach creating various key 
recovery fields for keys that exist as well as having a certificate and key recovery contexts for 
the key. Therefore, it would have been obvious to a person in the art at the time the invention 
was made to modify the method disclosed in Teppler to creating the supplemental aspect of the 
cryptographic material comprises the steps of determining whether the key container contains a 
certificate; associating the private key as a member of a key pair associated with the certificate, if 
the key container contains a certificate; and associating the private key as a member of a key pair 
having a default key specification, if the key container does not contain a certificate. This 
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modification would have been obvious because a person having ordinary skill in the art, at the 
time the invention was made, would have been motivated to do so since it is suggested by 
Chandersekaran et al, in col. 17, lines 17-36 and col. 18, Hnes 1-9. 
As per claims 5, 14, and 23: 

Teppler and Chandersekaran et al. substantially teach the method, computer program 
product, and apparatus of claims 2, 1 1, and 20. Furthermore, Teppler teaches wherein the step of 
creating a certificate or private key comprises creating the certificate (col. 33, lines 6-20). Not 
explicitly disclosed is the step of creating the supplemental aspect of the cryptographic material 
comprises the steps of extracting a key specification from the certificate and associating the 
certificate with a key pair under the extracted key specification. However, Chandersekaran et al. 
teach that a profile is created which creates an association with the various certificate chains 
corresponding to a key pair. Therefore, it would have been obvious to a person in the art at the 
time the invention was made to modify the method disclosed in Teppler for creating the 
supplemental aspect of the cryptographic material to comprise the steps of extracting a key 
specification from the certificate and associating the certificate with a key pair under the 
extracted key specification. This modification would have been obvious because a person having 
ordinary skill in the art, at the time the invention was made, would have been motivated to do so 
since it is suggested by Chandersekaran et al. in col. 17, line 54 - col. 18, line 9. 
As per claims 6, 15, and 24: 

Teppler and Chandersekaran et al. substantially teach the method, computer program 
product, and apparatus of claims 2, 1 1, and 20. Furthermore, Teppler teaches wherein the step 
of creating a certificate or private key comprises creating the certificate (col. 33, lines 6-20). Not 
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explicitly disclosed is wherein if the key container already exists for the certificate the step of 
creating the supplemental aspect of the cryptographic material comprises the steps of 
determining whether the key container has a private key; and associating the private key with a 
same key pair as the certificate, if the key container has the private key. However, 
Chandersekaran et al, teach a profile connected to a key where the key is associated with the 
certificate chain for the user. Therefore, it would have been obvious to a person in the art at the 
time the invention was made to modify the method disclosed in Teppler for the certificate the 
step of creating the supplemental aspect of the cryptographic material comprises the steps of 
determining whether the key container has a private key; and associating the private key with a 
same key pair as the certificate, if the key container has the private key. This modification would 
have been obvious because a person having ordinary skill in the art, at the time the invention was 
made, would have been motivated to do so since it is suggested by Chandersekaran et al. in col. 
17, line 54 -col. 18, line 9. ' 
As per claims 7, 16, and 25: 

Teppler and Chandersekaran et al. substantially teach the method, computer program 
product, and apparatus of claims 2, 11, and 20. Furthermore, Teppler teaches wherein the step of 
creating a certificate or private key comprises creating the certificate (col. 33, lines 6-20). Not 
explicitly disclosed is the step of creating the supplemental aspect of the cryptographic material 
comprises the step of: creating a public key from information in the certificate. However, 
Chandersekaran et al. teaches that a pubUc key certificate chain is comprised in the profile for 
the key recovery system. Therefore, it would have been obvious to a person in the art at the time 
the invention was. made to modify the method disclosed in Teppler for the step of creating the 
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supplemental aspect of the cryptographic material comprises the step of: creating a public key 
from information in the certificate. This modification would have been obvious because a person 
having ordinary skill in the art, at the time the invention was made, would have been motivated 
to do so since it is suggested by Chandersekaran et al in col. 17, line 54 - col. 18, line 9. 
As per claims 8, 17, and 26: 

Teppler and Chandersekaran et al. substantially teach the method, computer program 
product, and apparatus of claim 1,10, and 19. Furthermore, Chandersekaran teaches wherein the 
first Cryptographic-related API is one from the set of PKCS #11, CryptoAPI, and CDSA 
compatible API's, and the second Cryptographic-related API is not the same API as the first and 
is also one from the set of PKCS #11, CryptoAPI and CDSA compatible API's (col. 10, Hnes 1- 
49). 

As per claims 9, 18, and 27: 

Teppler and Chandersekaran et al. substantially teach the method, computer program 
product, and apparatus of claims 1,10, and 19. Furthermore, Chandersekaran et al. teach 
wherein the first Cryptographic-related API uses a certain term and the second Cryptographic- 
related API has a corresponding term, and wherein creating the supplemental aspect comprises 
creating material indicating a cross-reference between the term (col. 11, lines 7-64). 

"^References Cited, Not Used 

The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

1. US Patent No. 6,385,729 

2. US Patent No. 6,772,341 
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3. US Patent No, 6,484,259 

4. US Patent No. 5,996,076 

The above references have been cited because they are relevant due to the manner in which the 
invention has been claimed. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Nadia Khoshnoodi whose telephone number is (571) 272-3825. 
The examiner can normally be reached on M-F: 8:00-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Albert Decady can be reached on (571) 272-3819. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Nadia Khoshnoodi 
Examiner 
Art Unit 2133 
8/16/2005 
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